Add signal.original_event.reason to signal_extra_fields for insertion…

… into old indices (elastic#108594) (elastic#108615) Co-authored-by: Marshall Main <[email protected]>
kibanamachine · Aug 14, 2021 · 66926a8 · 66926a8
1 parent 324f9e9
commit 66926a8
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/...ugins/security_solution/server/lib/detection_engine/routes/index/signal_extra_fields.json b/...ugins/security_solution/server/lib/detection_engine/routes/index/signal_extra_fields.json
@@ -43,6 +43,14 @@
           }
         }
       },
+      "original_event": {
+        "type": "object",
+        "properties": {
+          "reason": {
+            "type": "keyword"
+          }
+        }
+      },
       "reason": {
         "type": "keyword"
       },